ldap backend - krbPrincipalName substring search

Paul B. Henson henson at acm.org
Mon Apr 6 17:51:58 EDT 2015


> From: Brandon Allbery
> Sent: Thursday, April 02, 2015 5:02 PM
> 
> Two operations come to mind, both kadmin requests: listprincs and ktadd
> (with -glob) both allow glob wildcards.

Yes indeed, both of those operations result in the missing index message in
the slapd log. However, neither are part of routine use here. I'll have to
ask some of the other sysadmins if they were doing something out of the
ordinary and used this functionality.

Thanks the pointer.



More information about the Kerberos mailing list